Click here to learn
about this Sponsor:
Home  |  News  |  Articles  |  Polls  |  Forum

Keywords: Match:
IBM researchers pioneer self-diagnostic wireless security tool
Jun. 18, 2002

Hawthorne, NY -- (press release excerpt) -- IBM Research has demonstrated the industry's first self-diagnostic tool that can automatically monitor 802.11 wireless networks and report security problems in real-time. The Distributed Wireless Security Auditor (DWSA), which runs on desktop and laptop computers, can monitor wireless network security and report to the central back-end servers minute by minute, 24 hours a day, seven days a week.

IBM researchers introduced its first version, the Wireless Security Auditor (WSA) last summer, which runs on a small wireless PDA running Linux. IBM Global Services quickly developed a specific services offering that deploys software tools, including the WSA, to help customers safeguard and perform risk assessments of their wireless networks. Researchers have now extended the tool, making it more autonomic by adding self-sensor and self-diagnosis features. Running as a lightweight process on wireless clients in an enterprise, DWSA can quickly report wireless infrastructure security issues to system administrators.

"As 802.11 wireless networks have become more popular, their security has to be checked frequently to ensure they are still secure," says Dave Safford, manager of Global Security Analysis Lab at IBM Research. "Our self-diagnostic tool takes advantage of the many wireless clients already out there by having them continuously monitoring the security of the wireless network and reporting anomalies to a central server, all without human intervention."

The DWSA system, which runs on Linux on desktops and laptops, can accurately pinpoint the location of any rogue access points, enabling network personnel to quickly find and then fix or remove them, unlike other wireless auditors that require personnel to perform time consuming physical searches by walking around the site. DWSA locates rogue access points based on signal strength measurements by the wireless hardware on the distributed clients. The signal strengths vary with the distance from the rogue, and can be used to estimate the actual distance. As long as at least three client machines report the signal strength of the rogue, their reports can be used by the system to calculate the access point location using the estimated ranges and simple geometry. The Windows version will be ready shortly.

Existing security for 802.11 wireless consists of two subsystems: a data encryption technique called Wired Equivalent Privacy (WEP) and an authentication method, either Shared Key or 802.1x. Both the encryption and authentication are optional, and wireless access points are typically shipped with both turned off. Wireless network security needs to be checked frequently since employees can easily add new wireless devices, which may become easy access points for hackers. This tool allows system administrators at the central location to find what access points exist and examine their configuration remotely so that they can take proper steps to keep the wireless network secure.

DWSA acts as an extension of IBM's security consulting team by continuously monitoring customers' wireless systems so they can enjoy the benefits of wireless technology with the security of wireline computing. In addition, a new wireless risk assessment offered by IBM Global Services for WLANs uses a combination of tools, techniques and methodology to help customers evaluate their security posture. As part of a full family of wireless services, the Wireless Security Auditor for LANs is used by IBM consultants to detect wireless access points that do not have the appropriate security. A set of recommendations are sent to the customer, as well as a proposal to address security issues detected. These recommendations go beyond the simple technology and cover processes and security policies as well.

IBM Tivoli Risk Manager continues to expand on its vulnerability management capabilities by extending its support to wireless network vulnerability management based on the DWSA. IBM Tivoli Risk Manager monitors output of the DWSA and other security checkpoints giving administrators a complete view of e-business security exposures, intrusions and wireless network vulnerability.



(Click here for further information)


FUEL Database on MontaVista Linux
Whether building a mobile handset, a car navigation system, a package tracking device, or a home entertainment console, developers need capable software systems, including an operating system, development tools, and supporting libraries, to gain maximum benefit from their hardware platform and to meet aggressive time-to-market goals.

Breaking New Ground: The Evolution of Linux Clustering
With a platform comprising a complete Linux distribution, enhanced for clustering, and tailored for HPC, Penguin Computing¿s Scyld Software provides the building blocks for organizations from enterprises to workgroups to deploy, manage, and maintain Linux clusters, regardless of their size.

Data Monitoring with NightStar LX
Unlike ordinary debuggers, NightStar LX doesn¿t leave you stranded in the dark. It¿s more than just a debugger, it¿s a whole suite of integrated diagnostic tools designed for time-critical Linux applications to reduce test time, increase productivity and lower costs. You can debug, monitor, analyze and tune with minimal intrusion, so you see real execution behavior. And that¿s positively illuminating.

Virtualizing Service Provider Networks with Vyatta
This paper highlights Vyatta's unique ability to virtualize networking functions using Vyatta's secure routing software in service provider environments.

High Availability Messaging Solution Using AXIGEN, Heartbeat and DRBD
This white paper discusses a high-availability messaging solution relying on the AXIGEN Mail Server, Heartbeat and DRBD. Solution architecture and implementation, as well as benefits of using AXIGEN for this setup are all presented in detail.

Understanding the Financial Benefits of Open Source
Will open source pay off? Open source is becoming standard within enterprises, often because of cost savings. Find out how much of a financial impact it can have on your organization. Get this methodology and calculator now, compliments of JBoss.

Embedded Hardware and OS Technology Empower PC-Based Platforms
The modern embedded computer is the jack of all trades appearing in many forms.

Data Management for Real-Time Distributed Systems
This paper provides an overview of the network-centric computing model, data distribution services, and distributed data management. It then describes how the SkyBoard integration and synchronization service, coupled with an implementation of the OMG¿s Data Distribution Service (DDS) standard, can be used to create an efficient data distribution, storage, and retrieval system.

7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.

 


Got a HOT tip?   please tell us!
Free weekly newsletter
Enter your email...
Click here for a profile of each sponsor:
PLATINUM SPONSORS
(Become a sponsor)

ADVERTISEMENT
(Advertise here)

Check out the latest Linux powered...

Mobile phones!

MIDs, UMPCs
& tablets

Mobile devices

Other cool
gadgets



BREAKING NEWS

• MontaVista touts Android readiness
• Via panel PC resists shock, liquids
• Linux provider touts support award
• "World's smallest humanoid robot" runs Linux
• Linux connects TVs to 'Net video
• Mot camera-phone runs widgets
• Linux-ready MILS kernel gains POSIX
• Multimedia processor plays H.264 video
• $7 ARM9 SoC gains mainline support
• Mini-ITX board has HDMI port
• Papers sought for Embedded Linux Conference
• Rugged Linux wrist computer upgraded
• Adobe unleashes 64-bit Flash
• USB 3.0 debuts
• Spotlight on Moblin.org Linux


Most popular stories -- past 90 days:
• Open source phone goes mass-market
• Tinest Linux system, yet?
• Garmin Nav devices run Gnome Linux
• ARM9 board boots Debian in 0.69 seconds
• Low-cost laptop runs Linpus Linux
• Linux-friendly Beagle fetches $150
• Mini Linux PC breaks $100 barrier
• Open source camera records geotagged video to SATA HDD
• Open set-top box ships
• First $100 laptop runs Linux


DesktopLinux headlines:
• "Moonlight" ready to shine
• Adobe unleashes 64-bit Flash
• Debian Lenny installer arrives
• Ubuntu announces ARM port
• Amazon offers Linux XOs
• Windows 7 "no threat" to netbook Linux
• Creative frees Sound Blaster driver code
• Linux, netbooks threaten Microsoft's fat profits
• Ibex inspires GNOME switch
• Linux to outship Windows in 2009?


Also visit our sister site:


Sign up for LinuxDevices.com's...

news feed

Home  |  News  |  Articles  |  Polls  |  Forum  |  About  |  Contact
 

Ziff Davis Enterprise Home | Contact Us | Advertise | Link to Us | Reprints | Magazine Subscriptions | Newsletters
Tech RSS Feeds | White Papers | ROI Calculators | Tech Podcasts | Tech Video | VARs | Channel News

Baseline | Careers | Channel Insider | CIO Insight | DesktopLinux | DeviceForge | DevSource | eSeminars |
eWEEK | Enterprise Network Security | LinuxDevices | Linux Watch | Microsoft Watch | Mid-market | Networking | PDF Zone |
Publish | Security IT Hub | Strategic Partner | Web Buyer's Guide | Windows for Devices

Developer Shed | Dev Shed | ASP Free | Dev Articles | Dev Hardware | SEO Chat | Tutorialized | Scripts |
Code Walkers | Web Hosters | Dev Mechanic | Dev Archives | igrep

Use of this site is governed by our Terms of Service and Privacy Policy. Except where otherwise specified, the contents of this site are copyright © 1999-2008 Ziff Davis Enterprise Holdings Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is prohibited. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners.